> Passwords, on average, have around 40 bits of entropy (or 0 if they're in any existing list, and some lists are 500M strong) If you choose a password by rand

> Passwords, on average, have around 40 bits of entropy (or 0 if they're in any existing list, and some lists are 500M strong) If you choose a password by randomly selecting from a list of 500M passwords, surely it has log_2(500,000,000) ~= 29 bits of entropy?